INFO: task syz-executor.3:19907 can't die for more than 143 seconds. syz-executor.3 D27912 19907 8679 0x00004006 Call Trace: context_switch kernel/sched/core.c:3265 [inline] __schedule+0x76e/0x17a0 kernel/sched/core.c:3937 schedule+0xd9/0x260 kernel/sched/core.c:4004 perf_event_free_task+0x50d/0x6d0 kernel/events/core.c:11703 copy_process+0x43c7/0x6830 kernel/fork.c:2281 _do_fork+0x146/0xfa0 kernel/fork.c:2367 __do_sys_clone kernel/fork.c:2522 [inline] __se_sys_clone kernel/fork.c:2503 [inline] __x64_sys_clone+0x1ab/0x270 kernel/fork.c:2503 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4598e9 Code: 24 18 0f b6 05 2f d1 3b 01 3c 01 76 0a 48 8b 6c 24 18 48 83 c4 20 c3 75 07 e8 63 08 fd ff 0f 0b c6 05 11 d1 3b 01 01 48 b8 00 <00> 00 00 00 00 f0 7f 48 89 04 24 e8 a7 dd fa ff f2 0f 10 44 24 08 RSP: 002b:00007f5183c92c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004598e9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5183c936d4 R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 00000000ffffffff INFO: task syz-executor.3:19907 blocked for more than 143 seconds. Not tainted 5.3.0-rc6-next-20190830 #75 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.3 D27912 19907 8679 0x00004006 Call Trace: context_switch kernel/sched/core.c:3265 [inline] __schedule+0x76e/0x17a0 kernel/sched/core.c:3937 schedule+0xd9/0x260 kernel/sched/core.c:4004 perf_event_free_task+0x50d/0x6d0 kernel/events/core.c:11703 copy_process+0x43c7/0x6830 kernel/fork.c:2281 _do_fork+0x146/0xfa0 kernel/fork.c:2367 __do_sys_clone kernel/fork.c:2522 [inline] __se_sys_clone kernel/fork.c:2503 [inline] __x64_sys_clone+0x1ab/0x270 kernel/fork.c:2503 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4598e9 Code: 24 18 0f b6 05 2f d1 3b 01 3c 01 76 0a 48 8b 6c 24 18 48 83 c4 20 c3 75 07 e8 63 08 fd ff 0f 0b c6 05 11 d1 3b 01 01 48 b8 00 <00> 00 00 00 00 f0 7f 48 89 04 24 e8 a7 dd fa ff f2 0f 10 44 24 08 RSP: 002b:00007f5183c92c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004598e9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5183c936d4 R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 00000000ffffffff Showing all locks held in the system: 1 lock held by khungtaskd/1064: #0: ffffffff88fa7f00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5337 1 lock held by rsyslogd/8543: #0: ffff888095590620 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:801 2 locks held by getty/8633: #0: ffff8880a0b7c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f352e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8634: #0: ffff8880a3f49090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8635: #0: ffff8880a1ff5090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8636: #0: ffff88809a1e0090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f392e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8637: #0: ffff888096192090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8638: #0: ffff8880a0328090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f192e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by getty/8639: #0: ffff88809a11c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340 #1: ffffc90005f092e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156 2 locks held by kworker/u4:7/9582: ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 1064 Comm: khungtaskd Not tainted 5.3.0-rc6-next-20190830 #75 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x172/0x1f0 lib/dump_stack.c:113 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:269 [inline] watchdog+0xc99/0x1360 kernel/hung_task.c:353 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 8689 Comm: kworker/1:3 Not tainted 5.3.0-rc6-next-20190830 #75 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events_power_efficient gc_worker RIP: 0010:mark_lock+0x1/0x1220 kernel/locking/lockdep.c:3631 Code: c7 18 ef f2 88 e8 2f 20 55 00 eb 8c 48 c7 c7 b0 a9 c5 89 e8 01 20 55 00 eb c5 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 28 83 fa 08 48 89 7d RSP: 0018:ffff88805c2b7a98 EFLAGS: 00000002 RAX: 000000000000000e RBX: 0000000000000000 RCX: 0000000000060000 RDX: 0000000000000008 RSI: ffff88805c2aaad8 RDI: ffff88805c2aa1c0 RBP: ffff88805c2b7bc0 R08: 0000000000000001 R09: 0000000000000374 R10: ffff88805c2aaad8 R11: ffff88805c2aa1c0 R12: 0000000000000374 R13: ffff88805c2aaafa R14: 0000000000000003 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000000a39eb000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x190/0x410 kernel/locking/lockdep.c:4487 seqcount_lockdep_reader_access include/linux/seqlock.h:81 [inline] read_seqcount_begin include/linux/seqlock.h:164 [inline] nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:311 [inline] gc_worker+0x26a/0xde0 net/netfilter/nf_conntrack_core.c:1248 process_one_work+0x9af/0x1740 kernel/workqueue.c:2269 worker_thread+0x98/0xe40 kernel/workqueue.c:2415 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352